From 79fa5db7f43202028ac24ed36fe24090af79e8e6 Mon Sep 17 00:00:00 2001 From: Dan Ramich Date: Thu, 13 Sep 2018 16:44:24 -0700 Subject: [PATCH] Update _index.md --- .../en/admin-settings/rbac/cluster-project-roles/_index.md | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/content/rancher/v2.x/en/admin-settings/rbac/cluster-project-roles/_index.md b/content/rancher/v2.x/en/admin-settings/rbac/cluster-project-roles/_index.md index e78abc06b00..87e76579ec2 100644 --- a/content/rancher/v2.x/en/admin-settings/rbac/cluster-project-roles/_index.md +++ b/content/rancher/v2.x/en/admin-settings/rbac/cluster-project-roles/_index.md @@ -60,6 +60,9 @@ _Project roles_ are roles that can be used to grant users access to a project. T - **Read Only:** These users can view everything in the project but cannot create, update, or delete anything. + + > **Note:** If a user is added to a project as an owner or a member they will have permission to create namespaces in all projects they are a member of, even as a Read Only member. + #### Custom Project Roles @@ -142,4 +145,4 @@ When you revoke the cluster membership for a user that's explicitly assigned mem - Access the projects they hold membership in. - Exercise any [individual project roles](#project-role-reference) they are assigned. -If you want to completely revoke a user's access within a cluster, revoke both their cluster and project memberships. \ No newline at end of file +If you want to completely revoke a user's access within a cluster, revoke both their cluster and project memberships.